perfsonar development work

["Jeff W. Boote" <>]

On Jun 27, 2008, at 4:43 AM, Cándido Rodríguez Montes wrote:

> Hi Jeff and Nine,
>
> El 27/06/2008, a las 10:37, Nina Jeliazkova escribió:
>
> > Jeff,
> >
> > Jeff W. Boote написа:
> > > pS-UI should be attempting to fetch the data without  
> > > authentication, and if the service requires authentication it  
> > > should be responding with a message (response-code) that says  
> > > authentication-required. (just like your web-browser ;) )
> > Yes, if AA is not switched on in psUI, it behaves just like this -  
> > returning an error code, and not retrieving data.
> >
> > If AA is not to be switched on manually , as in the current  
> > implementation, what is the recommended workflow?
>
> I think it's not a good idea to indicate in the LS if the service  
> requires authN. At the moment, it really makes sense but when the  
> authR will be available it won't make sense to specify the whole  
> authR policy of the service in the LS, so perfSONAR UI would know  
> how to send the security token.

Exactly. The service may or may not require authentication based on  
the specific request that is made. In the long-run, it is not likely  
to be a simple boolean "service does/does not require auth". So, there  
is nothing so simple to register to the LS.

jeff

> perfSONAR UI should request the login when it receives the error  
> code error.authn.soap or error.authn.not_sectoken and then send  
> again the message. But also, it would be very useful if the user can  
> login previously (as he can do it so far) so if he knows perfSONAR  
> UI is going to send a lot of message at the same time, it won't send  
> them again with the Sec. Token.
>
> Regards
>
> > Regards,
> > Nina
> >
> > > jeff
> > > On Jun 27, 2008, at 2:19 AM, Andreas Hanemann wrote:
> > >
> > > > Hi all,
> > > >
> > > > In perfsonarUI there is a difficulty that the tool does not know  
> > > > whether a service requires authentication or not. The current  
> > > > implementation therefore asks for credentials even if those  
> > > > services currently requested do not require authentication (and  
> > > > if the user has ticked the use of authentication in general). An  
> > > > improvement to the situation would be that services indicate on  
> > > > registration to the LS whether they require authentication. I am  
> > > > not sure whether a simple flag (authentication yes/no) would be a  
> > > > sufficient solution.
> > > >
> > > > Best regards
> > > > Andreas
> > > >
> > > > --
> > > > Dr. Andreas Hanemann      DFN-Verein
> > > > Stresemannstr. 78
> > > > 10963 Berlin, Germany
> > > > Tel.:   ++49 30 884299 64
> > > > Fax:    ++49 30 884299 70
> > > > E-Mail: 
> > > >
> > > >  (Please do not use 
> > > >
> > > >  anymore)
> >
> > --
> > ---------------------------------
> > Dr. Nina Nikolova-Jeliazkova
> > Institute for Parallel Processing
> > Bulgarian Academy of Sciences
> > Acad. G. Bonchev St 25-A
> > 1113 Sofia, Bulgaria
> > Tel: +359 886 802011
> > ICQ: 10705013
> > www: http://ambit.acad.bg/nina
> > ---------------------------------
> > PGP Public Key
> > http://cert.acad.bg/pgp-keys/keys/nina-nikolova-0xEEABA669.asc
> >         8E99 8BAD D804 1A43 27B7  7F87 CF04 C7D1 EEAB A669
> > ---------------------------------------------------------------